asp.net - web.config Configuration for Folder Containing Mixed WCF and Domain Services -
i'm trying lock down security on folder contains mix of wcf , wcf-ria domain services authenticated users, except domain services. folder name "services" , contains following:
/services/service1.svc /services/service2.svc /services/service3.svc /services/authenticationservice.vb
instead of specifying each service separately, i'd deny access anonymous user folder, , allow anonymous access 1 service. since authenticationservice.vb doesn't exist after compiling, i'm not sure use location path.
this how current web.config looks:
<location path="services"> <system.web> <authorization> <deny users="?"/> </authorization> </system.web> </location> <location path="services/authenticationservice.vb"> <system.web> <authorization> <allow users="*"/> </authorization> </system.web> </location>
i've tried "services/authenticationservice"
path, didn't work. value should use path=
?
don't secure folder contains services, secure services using secure binding. i've written blog post explains how this.
Comments
Post a Comment